Fortinet
NSE7_SOC_AR-7.6 · Question #11
Which two playbook triggers enable the use of trigger events in later tasks as trigger variables? (Choose two.)
The correct answer is A. EVENT B. INCIDENT. Only the INCIDENT and EVENT starters carry an incoming payload that's exposed as trigger variables in subsequent tasks. The ON_DEMAND and ON_SCHEDULE triggers don't supply event data for use later in the playbook.
FortiAnalyzer for SOC
Question
Which two playbook triggers enable the use of trigger events in later tasks as trigger variables? (Choose two.)
Options
- AEVENT
- BINCIDENT
- CON SCHEDULE
- DON DEMAND
How the community answered
(23 responses)- A87% (20)
- C4% (1)
- D9% (2)
Explanation
Only the INCIDENT and EVENT starters carry an incoming payload that's exposed as trigger variables in subsequent tasks. The ON_DEMAND and ON_SCHEDULE triggers don't supply event data for use later in the playbook.
Topics
#playbook triggers#trigger variables#event trigger#incident trigger
Community Discussion
No community discussion yet for this question.